login[.]acenrenewable[.]com

login.acenrenewable.com was observed hosting a credential phishing page. The site’s HTML title resolves to “login.acenrenewable.com”, indicating no additional branding information was disclosed. VirusTotal analysis recorded 15 detections out of 93 scanning engines, confirming that multiple security vendors consider the domain malicious. Google Safe Browsing classifies the URL as a social‑engineering threat, and the domain appears on a single external blocklist, where it is listed by PhishDestroy as a confirmed phishing source.

The domain was registered through NameCheap, Inc. on 21 February 2026 and uses the Namecheap hosting nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. No further infrastructure details such as IP address, ASN, or geographic location were provided. As of the report date, the domain has been taken offline, which may limit immediate exposure but does not remove the historical risk associated with prior activity.

Defenders should continue to block the domain at perimeter and DNS layers, ensure that any alerts referencing the domain are correlated with the 15 VirusTotal detections, and monitor for potential re‑use of the registrar or hosting provider in future campaigns. Because the page title does not reveal the targeted brand, analysts should treat any credential submissions to this URL as generic credential harvesting attempts. Ongoing threat‑intel feeds should be consulted for any re‑appearance of the domain or related indicators.